CLSA-2026-1787860907 TuxCare security update for vm2 (34 CVEs)

TuxCare rebuilt vm2 to address 34 CVEs. Fixed in 3.10.0-tuxcare.1...

PT-2026-94330

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.8 Description The software fails to fully enforce the allowAsync: false option within VM and NodeVM. Although localPromise.prototype.then is replaced to prevent asynchronous operations, the sandbox's Promise static...

PT-2026-86586

TuxCare rebuilt vm2 to address 34 CVEs. Fixed in 3.10.0-tuxcare.1...

PT-2026-94310

Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.3 through 3.11.6 Description When the builtin: '' configuration or explicit permission is granted, the host node:sqlite module is exposed to code running in NodeVM. Although the module is wrapped with vm.readonly to prevent...

PT-2026-94315

Name of the Vulnerable Software and Affected Versions vm2 versions 3.10.2 through 3.11.6 Description A sandbox escape exists on Node.js 26 where Promise.prototype.finally bypasses wrapper protections caused by a stale PromiseThenLookupChain protector in V8 14.6. An attacker can exploit this by...

PT-2026-94329

Name of the Vulnerable Software and Affected Versions vm2 versions 2.0.0 through 3.11.6 Description NodeVM contains a builtin-module denylist bypass. When the embedder uses the builtin wildcard with negative entries in the require configuration, negative entries are matched by exact module name i...

PT-2026-94323

Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.4 through 3.11.6 Description Internal Node.js registered symbols are incompletely filtered across the sandbox boundary. The extraction filters in lib/setup-sandbox.js and the cross-realm symbol checks and write traps in...

PT-2026-94311

Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.3 through 3.11.6 Description When the crypto builtin is allowed, the host Node.js crypto module is exposed to a NodeVM sandbox. Although the module is presented via a recursive read-only proxy, its callable exports still...

PT-2026-94322

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.7 Description An incorrect authorization issue exists in the external package allowlist check. The system uses non-exact substring matching instead of full package-name boundary validation. This allows attackers to...

PT-2026-94328

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.7 Description NodeVM fails to normalize node:-prefixed builtin specifiers when evaluating negative deny entries in a wildcard require policy. While the node: prefix is stripped during resolution, negative wildcard...

PT-2026-94317

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.7 Description A remote code execution issue exists when require.external is enabled without an explicit require.root that excludes node modules. This allows sandboxed code to require the vm2 package itself, instantia...

PT-2026-94318

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.7 Description The software exposes the shared Buffer pool of Node.js to sandboxed code. This allows sandboxed code to acquire ArrayBuffers from small allocations to read and write to host-realm buffers. This issue ca...

PT-2026-94324

Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.0 through 3.11.7 Description The software fails to protect host TypedArray and ArrayBuffer prototypes from sandbox mutation. Attackers can utilize prototype-walking primitives to access and modify Uint8Array.prototype,...

PT-2026-94327

Name of the Vulnerable Software and Affected Versions vm2 versions 3.10.1 through 3.11.6 Description A sandbox escape exists when running on Node.js 26. The issue occurs because WebAssembly.compileStreaming and WebAssembly.instantiateStreaming can produce a raw host-realm Promise that rejects wit...

PT-2026-94306

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.8 Description An incomplete fix for Error.cause sanitization allows a sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit a...

PT-2026-94312

Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.3 through 3.11.6 Description When a NodeVM is configured to allow require'https', the host process's https.globalAgent is exposed to sandboxed code. Although the builtin loader uses a read-only proxy for host modules, method...

PT-2026-94313

Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.3 through 3.11.6 Description The host tls module is exposed to NodeVM sandbox code, which allows attackers to call the setDefaultCACertificates function and replace process-wide certificate authorities. By utilizing allowed t...

PT-2026-94321

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.7 Description A sandbox escape exists in the CLI tool that enables arbitrary code execution within the host Node.js process. An attacker can provide a malicious script file to the CLI that utilizes require filename t...

PT-2026-94316

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.7 Description A module allowlist bypass exists in the isPathAllowedForModule function. The issue stems from the use of raw string prefix matching instead of boundary-anchored comparison. This allows attackers to acce...

PT-2026-94309

Name of the Vulnerable Software and Affected Versions vm2 version 3.11.6 Description A sandbox escape allows remote code execution in the host Node.js process. The issue occurs because the bridge gate at lib/bridge.js:1624 only performs identity-checks on the direct call target when deciding...